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METHOD AND SYSTEM FOR ANALYZING THE SECURITY OF A FACILITY 



TECHNICAL FIELD 

[0001] The described technology relates generally to analyzing security of a 

facility to withstand a terrorist attack. 

BACKGROUND 

[0002] The security of facilities such as military installations, nonmilitary 

government installations, corporate campuses, and nuclear power plants has 
been a concern for quite some time. As terrorist attacks increase, the security of 
these facilities also need to increase. From time to time various organizations, 
such as a nuclear regulatory agency or a branch of the military, may promulgate 
directives or guidelines relating to the security of facilities. For example, a branch 
of the military may promulgate a directive that no building within a military base 
should be within 100 feet of the perimeter of the base unless the perimeter 
fencing meets a certain requirement (e.g., includes razor wire). As another 
example, a corporation may promulgate a rule that access to each door of its 
buildings is to be secured and that each window exposed to the outside of the 
corporate campus must be permanently closed. 

[0003] An organization may promulgate directives listing many requirements that 

should be complied with to address various security threats. If a facility has many 
buildings, it may be a difficult and time-consuming task to ascertain whether each 
building complies with the requirements. For example, a single building may have 
more than 100 windows that each must be analyzed to determine whether it 
complies with the appropriate security requirements. In addition, as an 
organization promulgates new directives and modifies existing directives, the 
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process of ascertaining whether each building complies with the requirements of 
the new directives and modified directives needs to be performed. 

[0004] When a facility has many buildings, it can be difficult for a person 

responsible for the security of the facility (e.g., security personnel) to know which 
buildings currently comply with the requirements, which buildings do not, and 
which buildings have not even been evaluated for compliance. In addition, since 
some requirements may be more important than others, security personnel may 
want to track which requirements are complied with by each building so that 
efforts to comply with the security requirements can be prioritized. 

[0005] It would be desirable to have a computer system that would assist security 

personnel to identify what security requirements are met for each building of a 
facility. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0006] Figure 1 is a display page for input of information describing the overall 

characteristics of a building in one embodiment. 
[0007] Figure 2 is a display page for input of information describing the walls of a 

building in one embodiment. 
[0008] Figure 3 is a display page for input of information describing the windows 

of a building in one embodiment. 
[0009] Figure 4 is a display page for input of information describing the doors of a 

building in one embodiment. 
[ooio] Figure 5 is a display page for input of information describing utilities of a 

building in one embodiment. 
[0011] Figure 6 is a display page illustrating the selection of a security 

requirement for display in one embodiment. 
[0012] Figure 7 is a display page illustrating detailed information about 

compliance of a building in one embodiment. 
[0013] Figure 8 is a display page illustrating mitigation information for a security 

requirement in one embodiment. 
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[0014] Figure 9 is a display page illustrating a display of mitigation measures in 

one embodiment. 

[0015] Figure 10 illustrates dialog boxes for collecting mitigation information in 

one embodiment. 

[0016] Figure 1 1 is a block diagram illustrating components of the security system 

in one embodiment. 

[0017] Figure 12 is a flow diagram illustrating the overall processing of the 

security system in one embodiment. 
[0018] Figure 13 is a flow diagram of the collect building information component in 

one embodiment. 

[0019] Figure 14 is a flow diagram of the output results component in one 

embodiment. 

DETAILED DESCRIPTION 

[0020] A method and system for analyzing the security of a facility is provided. In 

one embodiment, the security system evaluates whether the elements of a facility 
comply with security requirements and provides a graphical representation of the 
facility with the results of the evaluation displayed. For example, the facility may 
be a military base and the elements may be buildings or open areas (e.g., a 
baseball field) within the base. One security requirement may specify the 
minimum thickness of a window, and another may specify the minimum distance 
between each building and the facility perimeter. The security system provides a 
user interface through which security personnel can provide information 
describing the characteristics of each element of a facility. The characteristics 
may include the thickness of a window of a building and the distance from the 
building to the facility perimeter. The security system stores the provided 
information in a database. The security system then applies a rule for each 
security requirement (e.g., distance to perimeter should be more than 100 feet) to 
determine whether each element complies with the security requirement. The 
security system then displays a map of the facility with elements highlighted to 
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indicate whether they comply with the security requirements. For example, each 
element that fails to comply with at least one security requirement may be 
highlighted in red, and each element that complies with all the security 
requirements may be displayed in green. The security system may also allow a 
user to select a security requirement or subset of security requirements whose 
compliance is indicated by highlighting. For example, if a user selects a security 
requirement relating to window thickness, then the security system may highlight 
only those elements that do not comply with the window thickness security 
requirement. In this way, security personnel can easily visualize and identify 
which elements satisfy which security requirements. 

[0021] In one embodiment, the security system uses a geographic information 

system ("GIS") to control the displaying of the map of the facility. The GIS may 
have a database that describes the location of buildings, roads, parking areas, 
fencing, use areas, and so on of a facility. The security system invokes the GIS to 
display a map and provides an indication of the highlighting that is to be used for 
each building or, more generally, each element. The GIS displays the map with 
the indicated highlighting and allows a user to zoom in and out and scroll around 
the map. When a user selects a displayed element (e.g., a building), the security 
system displays detailed information about the element. For example, the 
security system may display a dialog box that lists each security requirement and 
indicates whether the selected building complies with each security requirement. 
The security system may also allow the user to select the types of elements to be 
displayed. For example, the user may request to view the buildings and fences of 
the facility, but not the roads and parking areas. 

[0022] In one embodiment, the security system allows a user to input certain 

information about a characteristic of a building (or more generally an element) 
that was not initially provided. For example, the user may know that the building 
has been reinforced and thus is now blast resistant. After the user indicates that 
the building is blast resistant, the security system may reevaluate whether any of 
the security requirements have been met. The security system may also allow the 
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user to input mitigation information about a security requirement for a building. 
For example, a security requirement may specify the minimum distance between a 
building and the facility perimeter. That requirement, however, may be mitigated 
by placing a jersey barrier between the perimeter and the building. In such a 
case, the security system allows the user to indicate the measures taken to 
mitigate the security risks. When the security system subsequently displays that 
building, it may use a different highlighting to indicate that, although the security 
requirement has not been complied with, the risk has been mitigated. 

[0023] In one embodiment, the security system may allow the user to relax certain 

security requirements to help a user evaluate the cost/benefit tradeoffs of strictly 
complying with a security requirement. For example, a facility may have 10 
buildings that do not comply with a 100-foot minimum distance to perimeter 
security requirement. One solution might be to move the entire perimeter. If the 
minimum distance is relaxed to 90 feet, however, it may be that only one building 
does not comply with the relaxed requirement. If so, the security personnel may 
decide that the additional security benefit of moving the perimeter is not worth the 
cost. The security system may display the nine buildings with highlighting to 
indicate that, although they do not comply with the security requirement, they do 
comply with the relaxed security requirement. The security personnel may decide 
to perform mitigation for the tenth building and perform no or minimal mitigation 
for the nine other buildings. 

[0024] Figures 1-5 are display pages for input of information describing the 

characteristics of the buildings of a facility in one embodiment. Figure 1 is a 
display page for input of information describing the overall characteristics of a 
building in one embodiment. The display page 100 includes various input fields 
101 for input of information and various buttons 102 to access additional display 
pages for input of more detailed information. In this example, the display page 
includes fields for input of population classification, story count, wall count, 
structure name, building number, construction, and so on. One skilled in the art 
will appreciate that the field names are descriptive of the information that is 
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collected. For example, the construction field may be used to specify the 
construction type of frame, masonry, cement, and so on. The possible options of 
such a field may be provided in a drop-down list. The building photo field allows 
the user to identify a file that contains a photograph of the building. The security 
system may provide an option that would allow a user to view the photograph of a 
selected building. The button allows the user to access display pages for 
providing information on walls, windows, doors, and utilities of the building. 

[0025] Figure 2 is a display page for input of information describing the walls of a 

building in one embodiment. The display page 200 includes a wall number field 
201 and input fields 202. The wall number field identifies the wall number for 
which the data of the input fields apply. The field names of the input fields are 
descriptive of the information to be input in the field. For example, the field 
"distance" under the heading "visible from perimeter" is for entry of the distance of 
the wall to the perimeter of the facility. The "adjacent buildings," "adjacent 
roadways," "adjacent parking," and "adjacent storage" headings identify areas for 
entry of adjacent building, roadway, parking, and storage information. 

[0026] Figure 3 is a display page for input of information describing the windows 

of a building in one embodiment. The display page 300 includes a window type 
field 301 and entry fields 302. The windows are grouped by shared 
characteristics (e.g., number of panes and thickness) referred to as a window 
type. The headings are descriptive of the data collected by each of the fields. 
The wall and count headings identify fields for entry of the number of windows of 
the specified window type on each wall. 

[0027] Figure 4 is a display page for input of information describing the doors of a 

building in one embodiment. The display page 400 includes a door type field 401 
and entry fields 402. The door type field is analogous to the window type field of 
Figure 3. 

[0028J Figure 5 is a display page for input of information describing utilities of a 

building in one embodiment. The display page 500 includes various check fields 
501 for indicating the status of utilities to the building. The display page also 
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includes a mailroom area 502 for input of characteristics of the mailroom of the 
building. 

[0029] Figure 6 is a display page illustrating the selection of a security 

requirement for display in one embodiment. The display page 600 includes a 
selection box 601 that lists each of the 12 security requirements or criteria in one 
embodiment. The security requirements are listed in Table 1 below. The security 
system allows the user to select one or more or all of the security requirements. 
The security system then highlights the buildings based on whether they comply 
with the selected security requirements. Map 602 illustrates a portion of a facility 
with buildings, roadways, and parking areas displayed. 

[0030] Figure 7 is a display page illustrating detailed information about 

compliance of a building in one embodiment. In this example, the user has 
selected the building named "Wing HQ," and the security system has displayed 
the status of compliance for each of the security requirements for that building. 
The status is shown in window 701 . The legend at the bottom of the window 
indicates the possible statuses of a security requirement. The statuses can be 
adequate, inadequate, mitigated, incomplete, exempt, and not surveyed. The 
statuses of adequate, inadequate, and mitigated have been described above. 
The status of incomplete indicates that not enough information has been collected 
to determine compliance (e.g., a building fails the security requirement, but a blast 
analysis has not been completed to determine the building's adequacy). The 
status of exempt indicates that for some reason the building does not need to 
comply with this security requirement (e.g., if the building is not currently being 
used, then a window treatments requirement may not apply). The status of not 
surveyed indicates that the information related to that security requirement has 
not been collected. Area 702 of the display page allows the user to select what 
information to be displayed on the map. In this example, the user has selected to 
display information related to the buildings, parking areas, roads, and use areas. 

[0031] Figure 8 is a display page illustrating mitigation information for a security 

requirement in one embodiment. In this example, the user has requested to 
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provide mitigation information related to the super structure security requirement. 
Window 801 provides information describing the security requirement and 
mitigation measures. Area 802 describes the security requirement, area 803 
describes a rationale for the security requirement, area 804 suggests possible 
mitigation measures that can be taken, and area 805 lists cost information. The 
information in areas 802 and 803 may be defined by the security system, and the 
information in areas 804 and 805 may be provided by security personnel. The 
window also contains field 806 for entry of resistance information for the structure. 
After the resistance information is updated, the security system may reevaluate 
the security requirements based on this additional information. 

[0032] Figure 9 is a display page illustrating a display of mitigation measures in 

one embodiment. In this example, the user has drawn objects 901 at the end of a 
road to indicate that the road has been temporarily blocked off. This information 
may be stored in the map database. 

[0033] Figure 10 illustrates dialog boxes for collecting mitigation information in 

one embodiment. In dialog box 1001, the user enters a description of the 
mitigation and its cost. In dialog box 1002, the user identifies the buildings that 
have been mitigated. In dialog box 1003, the user indicates which security 
requirements should have their compliance reevaluated in light of the mitigation. 

[0034] As these display pages indicate, the security system can be used to 

evaluate whether the buildings of a military base comply with security 
requirements. One skilled in the art will appreciate that the security system can 
be used to analyze the security in many other environments. Although different 
data would be collected and different security requirements would be specified, 
one skilled in the art will know how to adapt the described embodiment to those 
environments. 

[0035] Table 1 lists the security requirements for the buildings of a military base in 

one embodiment. 
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Table 1 





Security 
Requirement 


Description 


1 


Direct Weapons 
Screening 


ensure that no weapons can be aimed directly at an entrance to 
the building from the perimeter 


2 


Buildina 
Separation 

V# L/%4 1 14 H w 1 1 


ensure that the buildinas are not too close tooether 


3 


Perimeter Standoff 


ensure that the building is not too close to the perimeter 


4 


Suoer Structure 


ensure that the building is strong enough to withstand a blast 


5 


Window 
Treatments 


ensure that the windows will not shatter with a blast 


6. 


Entrance/Exits 


ensure that doors are strong 


7. 


Parking, Roads, 
Drop-off 


ensure adequate protection between each building and roads, 
parking and drop-off areas 


8. 


Building Perimeter 
Protection 


ensure that the perimeter of the building can be secured 


9 


External Storage 


ensure that external storage areas are not too close to the building 


10 


Security Lighting 


ensure adequate outside lighting 


11 


Mailroom Location 


ensure that damage to mailroom in building can be isolated 


12 


Utility Systems 


ensure that utilities to building can be protected 



The security system takes the information provided about the characteristics of a 
building and calculates various values from the provided information. For 
example, the calculated values may include the distance to the closest building 
and whether the window treatments are adequate. Table 2 illustrates some 
sample calculations that are used in determining compliance with the 12 security 



requirements. 

Table 2 





Calculated 
Values 


Calculation Rules 


1 


Screened 


"adequate" if no wails visible 

"adequate" if windows are covered with shutters or curtains 


2 


Building Type 


"primary gathering" if troop billeting 
"exempt" if uninhabited 
"inhabited" if stand-alone retail 




Closest 
Building 


distance to closest building 


3 


Distance to 
Perimeter 


distance to facility perimeter 


4 


Number of 
Stories 


number of stories in the building 


5 


Window 
Frame 


"adequate" if blast resistant 




Window 
Thickness 


"adequate" if single pane and single pane polycarbonate 
"adequate" if double pane and double pane polycarbonate 
"adequate" if single pane, single pane laminate, thickness > 7.5 
"adequate" if double pane, double pane laminate, thickness > 7.5 
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Calculated 
Values 


Calculation Rules 


6 


Door Type 


"adequate" if opens out, blast door, and not glazed window 
"adequate" if opens out, blast door, and glazed window thick enough 




Entrance Exit 


"adequate" if wails are adequate 


7 


Closest Drop- 
off 


distance to closest 




Drop-off 
Qualities 


"adequate" if no wall adjacent to the drive up 


8 


Perimeter 
Barriers SVB 


"mitigated" if walls within second perimeter 
"mitigated" if wall barrier is jersey or fence 


9 


Closest 
Storage 


distance to closest external storage 


10 


Exterior Light 


"adequate" if lighting is sufficient 


11 


Mailroom 


"adequate" if on the facility perimeter, not near communications 
facilities, and not near a population center 


12 


System 
Location 


"adequate" if a wall has no air intake or one above a minimum height 
"adequate" if utilities have emergency shutoff, redundancies, and 
restricted access 



After the values are calculated, the security system then determines whether the 
building complies with each security requirement, Table 3 illustrates the rules for 
compliance for each security requirement and the corresponding highlighting. 
Green corresponds to adequate, yellow corresponds to mitigated, red 
corresponds to inadequate, and gray corresponds to incomplete or not surveyed. 



Table 3 





System 
Requirement 


Green 


Yellow 


Red 


Gray 


1 


Direct 

Weapons 

Screening 


Screened is 
adequate 


Screened is 
mitigated 


Screened is 
inadequate 


Screened is 
null 


2 


Building 
Separation 


Closest 
Building > 
threshold 


Blast Resistant 
2 


Closest 
Building < 
threshold 


Closest 
Building is null 


3 


Perimeter 
Standoff 


Distance to 
Perimeter > 
threshold 


Blast Resistant 
3 and Distance 
to Perimeter > 
blast resistant 
threshold 


Distance to 
Perimeter < 
blast 

resistance 
threshold 


Distance to 
Perimeter is 
null 


4. 


Super 
Structure 


Number of 
Stories >=3 
and Super 
Structure is 
adequate 


Number of 
Stories >=3 
and Super 
Structure is 
mitigated 


Number of 
Stories >=3 
and Super 
Structure is 
inadequate 


Super 
Structure is 
null or Number 
of Stories < 3 


5 


Window 
Treatments 


Window 
Thickness is 
adequate 


Window 
Thickness is 
mitigated 


Window 
Thickness is 
inadequate 


Window 
Thickness is 
null 


6. 


Entrance/ 
Exit 


Entrance/Exit 
is adequate 


Entrance/Exit 
is mitigated 


Entrance/Exit 
is inadequate 


Entrance/Exit 
is null 
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System 
Requirement 


Green 


Yellow 


Red 


Gray 


7. 


Parking, 
Roads, Drop- 
off 


Closest Drop- 
off >= 
threshold 


mitigated 


Closest Drop- 
off < threshold 




8. 


Building 

Perimeter 

Protection 


Perimeter 
Barriers SVB is 
adequate 


Perimeter 
Barriers SVB is 
mitigated 


Perimeter 
Barriers SVB is 
inadequate 


Perimeter 
Barriers oVd is 
null 


9 


External 
oiorage 


Closest 
oiorage >— 
threshold 


mitigated 


Closest 
oiorage < 
threshold 


Closest 
oiorage is nun 


10 


Security 
Lighting 


Entrance/Exit 
is adequate 


Entrance/Exit 
is mitigated 


Entrance/Exit 
is inadequate 


Entrance/Exit 
is null 


11 


Mailroom 
Location 


Mailroom is 
adequate 


Mailroom is 
mitigated 


Mailroom is 
inadequate 


Mailroom is 
null 


12 


Utility 
Systems 


System 
Location is 
adequate 


System 
Location is 
mitigated 


System 
Location is 
inadequate 


System 
Location is null 



[0036] Figure 1 1 is a block diagram illustrating components of the security system 

in one embodiment. The security system includes a collect building information 
component 1101, an apply calculation rules component 1102, an evaluate 
security requirements component 1103, and an output results component 1104, 
which are all processing components. The security system also includes a 
building information store 1111, a calculation rules store 1112, a calculated value 
store 1 1 13, a requirements rule store 1 1 14, a requirement results store 1115, and 
a map database 1116, which are all storage components. The collect building 
information component displays the display pages of Figures 1-5 and stores the 
collected information in the building information store. The apply calculation rules 
component applies the calculation rules to the provided information of the building 
information store. The apply calculation rules component stores its calculated 
values in the calculated value store. The evaluate security requirements 
component applies the requirement rules to the calculated values and the 
provided information to generate the requirement results. The output results 
component uses the map database information and the requirement results to 
generate the output for the user. The output results component may also input 
certain information and store it in the building information store. The output 
results component may also request the apply calculation rules component and 
the evaluate requirements component to reprocess their information. 
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(0037] The security system may be implemented on computer systems that may 

include a central processing unit, memory, input devices (e.g., keyboard and 
pointing devices), output devices (e.g., display devices), and storage devices 
(e.g., disk drives). The memory and storage devices are computer-readable 
media that may contain instructions that implement the security system. In 
addition, the data structures and message structures may be stored or transmitted 
via a data transmission medium, such as a signal on a communications link. 
Various communications links may be used, such as the Internet, a local area 
network, a wide area network, or a point-to-point dial-up connection. 

[0038] Figure 12 is a flow diagram illustrating the overall processing of the 

security system in one embodiment. In block 1201, the system collects building 
information and stores it in the building information store. In block 1202, the 
system applies the calculation rules to the building information to generate the 
calculated values. In block 1203, the component evaluates the security 
requirements to generate the compliance results. In block 1204, the component 
outputs the results. 

[0039] Figure 13 is a flow diagram of the collect building information component in 

one embodiment. In block 1301, the component collects the general building 
information using the display page of Figure 1. In block 1302, the component 
collects the information on the walls using the display page of Figure 2. In block 
1303, the component collects window information using the display page of Figure 
3. In block 1304, the system collects door information using the display page of 
Figure 4. In block 1305, the system collects utility information using the display 
page of Figure 5. In block 1306, the component stores the building information in 
the building information store and completes. 

[0040] Figure 14 is a flow diagram of the output results component in one 

embodiment. In block 1401 , the component receives display parameters, such as 
an indication to display buildings and roadways and an indication to display 
highlighting for certain security requirements. In block 1402, the component 
retrieves the results. In block 1403, the component identifies the color for each 
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building. In block 1404, the component requests the display of the map with the 
indicated coloring. The component then completes. 
[0041] One skilled in the art will appreciate that although specific embodiments of 

the security system have been described herein for purposes of illustration, 
various modifications may be made without deviating from the spirit and scope of 
the invention. For example, one skilled in the art will appreciate that the 
information used to evaluate compliance with a security requirement can be 
derived from the map information (e.g., distance to perimeter). The security 
requirements can also relate to any type of security risk, such as a biological 
hazard, chemical hazard, or aerial hazard (e.g., a missile). One skilled in the art 
will appreciate that the principles of the security system can be applied to non- 
security environments. For example, a system may be developed to analyze 
safety requirements, rather than security requirement. A city may promulgate 
various safety requirements such as maximum distance of a building to fire 
hydrant, minimum earthquake standards, minimum number of exits for a building, 
minimum distance between a structure and a chemical tank, and so on. The city's 
fire department may use the safety system to track, analyze, and view the 
compliance to the safety requirements. Similarly, a corporation may use the 
safety system to track compliance of the buildings of its campus. A system may 
also be developed to analyze other types of requirements such as environmental, 
building code, and health requirements. In addition, the elements of a facility can 
include permanent and temporary structures, tanks, sewers, power lines, waste 
storage area, docks, air fields, vehicles, and so on. The elements can also 
include sub-elements of an element to form a hierarchy of elements. For 
example, each door of a building can be a sub-element that can be separately 
highlighted to indicate its compliance with the requirements. The system may 
allow a user to select the type and level of sub-element to be displayed. The 
facilities can include shipping terminals, ship ports, airports, a building, a city, a 
university, fuel depots, manufacturing facilities, shopping malls, parking 
structures, and so on. In general, a system can be provided that allows for the 
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tracking, analysis, and viewing of compliance of a facility having elements with 
requirements. Accordingly, the invention is not limited except by the appended 
claims. 

[0042] From the foregoing, it will be appreciated that specific embodiments of the 

invention have been described herein for purposes of illustration, but that various 
modifications may be made without deviating from the spirit and scope of the 
invention. Accordingly, the invention is not limited except as by the appended 
claims. 
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